pw-container

pw-container [options] [command] [arguments...]

pw-container creates a new security context using the PipeWire SecurityContext extension API. It sets up a temporary Unix socket as a server with the given properties, and clients created from this socket have the security properties attached to them.If a command is specified, it is executed within the new security context. If no command is given, the socket address is printed to standard output. The process does not exit until terminated with a signal (exits 0 on SIGINT/SIGTERM).This is useful for sandboxing applications or running programs with restricted PipeWire access.

-r, --remote name

Connect to specific remote PipeWire instance

Set context properties using JSON object

Display help message

Security contexts must be supported by the PipeWire configuration. Properties must be valid JSON format. The process stays running until signaled.

Part of PipeWire, the modern multimedia framework for Linux. Provides application isolation capabilities for audio and video access control.

pipewire(1), pw-cli(1), pw-cat(1), wpctl(1)